Privacy

Privacy statement

If you are a user with general public and anonymous access the The Kent Air Ambulance web site does not store or capture personal information, but merely logs the user's IP address that is automatically recognised by the web server. We do not use cookies for collecting user information and we will not collect any information about you except that required for system administration of our web server.

Data Protection

Autism Sussex is a privacy conscious organisation and is strongly committed to your right to privacy. That is why we have drafted a Privacy and Data Protection Statement, which follows guidelines set out in the Data Protection Act 1998.

The Data Protection Act 1998

The Data Protection Act 1998 set rules for processing personal information and applies to structured paper records as well as data held on computers. With the Freedom of Information Act 2000 which came into force on 1 January 2005, the provisions of the Data Protection Act 1998 will apply to all records, including those structured other than by reference to the data subject, and completely unstructured files.

Autism Sussex Use and Storage of Data

The Data Protection Act states that those who record and process personal information must be open about how the information is used and must follow the eight principles of ‘good information handling’.

These principles state that data must be:

1. Fairly and lawfully processed
2. Processed for limited purposes 
3. Adequate, relevant and not excessive 
4. Accurate 
5. Not kept for longer than is necessary 
6. Processed in line with your rights 
7. Secure, and Not transferred to countries without adequate protection.

By law, data controllers, including Autism Sussex, have to keep to these principles.

If you believe in any way that the Autism Sussex is not processing your personal data in accordance with these principles, please contact Autism Sussex, at the address listed on the contacts page.

How does Autism Sussex collect data?

There are several means by which Autism Sussex collects personally identifiable data, for example:

• Through contact form on both Autism Sussex main site and Training site
• Booking form on Autism Sussex Training Site
• Acceptance for inclusion on a mailing list or database 
• For research, surveys or monitoring purposes
• Online Shop
• By entering into email or telephone correspondence with an employee of Autism Sussex
• Through our Web Statistical Package

All personally identifiable information provided to Autism Sussex is processed in accordance with the principles of the Data Protection Act 1998.

Is information passed to third parties?

It is Autism Sussex policy to only disclose information to third parties if explicitly required to do so by United Kingdom Law.

Autism Sussex will obtain your consent before passing on any information to any third parties.

Autism Sussex does not collect or compile personally identifying information for dissemination or sale to external parties for marketing purposes or host mailings on behalf of third parties

How do I make a subject access request?

Individuals wishing to access their personal information should submit a request in accordance with the following notes:

1. Make your request, in writing, to the General Manager.
2. The request should include details and provide documented evidence of who you are (e.g. driving licence, passport, birth certificate). You should also provide as much detail as possible regarding the information you wish to access (e.g. where and by whom information is believed to be held, specific details of information required etc).
3. You are not required to state WHY you wish to access the information: the details we require are merely those that will aid the efficient location and retrieval of information. 
4. Autism Sussex adopts a general policy of openness in terms of allowing individuals access to their personal information and wherever possible we aim to waive the £10 administration fee (permitted under the Data Protection Act 1998). 
5. Once the General Manager receives a Subject Access Request, all efforts will be made to fully comply within 40 days. In any event, you will receive all the information that has been located and can be released within 40 days and an explanation for any information that cannot be provided at that time.